CVE-2025-68351

Aliases:UBUNTU-CVE-2025-68351DEBIAN-CVE-2025-68351CGA-33gm-w3h8-4jcvCGA-5pxv-q98q-2mhjCGA-5wp5-5q8q-6vv6CGA-5wxg-qp6h-88xgCGA-622h-cv42-rp2fCGA-64x6-22hf-9mc2CGA-69mm-xf3x-p2mmCGA-72h9-cj2j-cq89CGA-7jgw-g844-cc2qCGA-7m53-mxm6-48phCGA-8495-w4q9-pcfqCGA-934v-477x-98cvCGA-9448-vqw4-w23xCGA-9vqx-pv23-j53gCGA-c2m9-wfv6-f4qgCGA-cjgc-42cq-ffm5CGA-cwvh-3296-f9ggCGA-f84v-w4r8-6m7gCGA-fvw6-hpx5-qp5jCGA-gwjp-hp8r-3jxqCGA-hvj8-f4vc-jwmfCGA-j284-8c6f-jrw6CGA-j8vr-xhwp-q7xvCGA-m522-248j-x87hCGA-mrp4-c64m-gmv2CGA-p8f6-pv86-rw8qCGA-p9qr-c6v7-hrp8CGA-pcv7-9h66-h456CGA-pg5w-m9h6-2q62CGA-pvfv-pj25-hr5mCGA-q2x2-v4wv-cqcrCGA-q9gc-qmf8-x4rjCGA-r333-vxv2-45m7CGA-v4xw-hf9v-6gxcCGA-vm3c-877v-vp6fCGA-vmgp-7f8j-gxwfCGA-wg69-x23m-4p44CGA-wh74-3jx7-fcvvCGA-wp9r-f3f7-c326CGA-xxw3-2jmw-6q99
Advisory lineage Upstream: 0 Downstream: 32
Analyzed
Published: 24 Dec 2025, 10:32
Last modified:27 May 2026, 09:28

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.17% LOW
0% probability +0.17%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Dec 2025, 10:32
Published
Vulnerability first disclosed
27 May 2026, 09:28
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`. Function `exfat_get_dentry_set` would increase the reference counter of `es->bh` on success. Therefore, `exfat_put_dentry_set` must be called after `exfat_get_dentry_set` to ensure refcount consistency. This patch relocate two checks to avoid possible leaks.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.17%• Percentile: 7%

Affected Systems

  • chainguard•linux-aws-6.12

    < 6.12.77-r0 | < 6.12.77-r1 | < 6.12.74-r1 | < 6.12.76-r0 | < 6.12.77-r2 | < 6.12.78-r0 | < 6.12.80-r0

  • chainguard•linux-azure-6.12

    < 6.12.74-r1 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.80-r0 | < 6.12.78-r0 | < 6.12.77-r2 | < 6.12.76-r0

  • chainguard•linux-gcp-6.12

    < 6.12.77-r2 | < 6.12.76-r0 | < 6.12.78-r0 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.77-r1 | < 6.12.80-r0

  • chainguard•linux-qemu-6.12

    < 6.12.76-r0 | < 6.12.80-r0 | < 6.12.74-r1 | < 6.12.78-r0 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.77-r2

  • chainguard•linux-vmware-6.12

    < 6.12.77-r1 | < 6.12.76-r0 | < 6.12.77-r0 | < 6.12.78-r0 | < 6.12.80-r0 | < 6.12.77-r2 | < 6.12.74-r1

  • debian•linux

    < 6.12.69-1 | < 6.18.3-1

  • ubuntu•linux

    < 6.8.0-117.117 | < 6.17.0-22.22

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    < 6.8.0-1055.58 | < 6.17.0-1012.12

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.14

    all

  • ubuntu•linux-aws-6.17

    < 6.17.0-1012.12~24.04.1

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-6.5

    all

  • ubuntu•linux-aws-6.8

    < 6.8.0-1057.60~22.04.1

  • ubuntu•linux-aws-fips

    < 6.8.0-1055.58+fips1

  • ubuntu•linux-azure

    all | < 6.8.0-1056.62 | < 6.17.0-1013.13

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.11

    all

  • ubuntu•linux-azure-6.14

    all

  • ubuntu•linux-azure-6.17

    < 6.17.0-1013.13~24.04.1

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-6.5

    all

  • ubuntu•linux-azure-6.8

    < 6.8.0-1059.65~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | all | all

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.14

    all

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fde-6.8

    all

  • ubuntu•linux-azure-fips

    < 6.8.0-1059.65+fips1

  • ubuntu•linux-azure-nvidia

    all

  • ubuntu•linux-azure-nvidia-6.14

    all

  • ubuntu•linux-bluefield

    all | < 6.8.0-1022.26

  • ubuntu•linux-fips

    < 6.8.0-116.116+fips1

  • ubuntu•linux-gcp

    all | < 6.8.0-1058.61 | < 6.17.0-1012.12

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.19

    all

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.8

    all

Showing first 50 affected entries in server-rendered view.

References (21)